$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft File: D85F6D41E807D8825356A681A7518FA27664A965.mft (raw, json) Hash identifier: KJ5SV0DMewTQuxqnc0XdqlZbHe56KNbnnrDINAveBQE= Subject key identifier: 66:99:33:C7:F7:61:7F:B6:CF:EE:D0:10:E9:0B:73:63:7A:F0:1C:4E Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 2D8D8A3381EA282C0AB590BECFB592A8DACCD451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft Manifest number: 017B Signing time: Sat 11 Oct 2025 01:52:18 +0000 Manifest this update: Sat 11 Oct 2025 01:47:18 +0000 Manifest next update: Tue 14 Oct 2025 06:32:18 +0000 Files and hashes: 1: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: hFj4Uh0PGeOBka7Cx4rmARhSt9TGPmz98D01cPT+PF4=) 2: D85F6D41E807D8825356A681A7518FA27664A965.crl (hash: H+iXoIkatO2g98vmwC8g/VtKJ9JBMj+62FjBw076P54=) 3: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: 2X5KoMU/cWrAj0o88iqREF+W66XbV79s9jtdMfDvn84=) 4: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: mLhBYPkwACBbxlJsTnV03pPrOs7jfGDROaGC1YIb24I=) 5: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: X3XCCURHmUEWOKsujokS9KRQ2ATuG6WfjZ6Xo/ilPmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Oct 2025 06:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8d:8a:33:81:ea:28:2c:0a:b5:90:be:cf:b5:92:a8:da:cc:d4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Oct 11 01:47:18 2025 GMT Not After : Oct 14 06:32:18 2025 GMT Subject: CN=669933C7F7617FB6CFEED010E90B73637AF01C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:2d:fc:ee:0a:f7:80:ed:f3:8c:c6:a7:b4: 7e:81:c4:c7:2e:f1:ba:cb:f2:07:e5:d4:eb:1c:4f: 38:7f:16:c0:48:7a:a5:b9:7e:83:8a:90:23:9b:98: b8:5a:74:34:75:15:72:4e:fc:1f:3b:66:78:97:70: 1c:28:ce:a6:5a:ec:f4:a8:e7:0f:b2:5b:5f:a5:20: e2:da:ec:4e:ce:28:e0:35:6e:6b:b9:c8:21:7d:40: ba:d7:e1:b8:cd:db:f6:82:6c:a4:80:e6:cc:71:9d: 2f:a4:92:d2:4d:05:44:b6:1d:ab:ad:09:7b:59:70: 7a:ef:3b:28:1a:fb:42:9a:f8:77:ea:a6:36:31:ce: 94:e2:19:4b:79:9e:cd:bb:ad:e5:59:4a:32:82:a3: 10:e5:fa:f1:d9:f5:e4:ea:62:2c:c3:c7:14:62:99: 2f:25:4e:49:90:0c:40:cc:fc:6c:a4:84:b5:7e:90: 1a:82:1a:6f:42:81:45:c2:fc:3b:aa:f4:65:bc:84: 78:0d:2d:7e:f9:bf:2f:12:a3:ae:0a:c1:e2:f5:d7: 45:a9:58:41:18:8b:ce:1b:74:26:01:4b:f8:33:95: 7b:57:c6:73:3d:68:4a:52:d0:b8:95:4b:9f:29:5f: 71:94:b7:40:b8:5f:69:6e:bf:10:33:e1:97:74:f3: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:99:33:C7:F7:61:7F:B6:CF:EE:D0:10:E9:0B:73:63:7A:F0:1C:4E X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a8:9e:c7:5c:aa:8a:ef:bc:5d:7f:90:36:43:20:2e:9c:7d: 01:72:1d:2b:d2:4f:e9:a3:2f:9b:77:fa:1b:7b:e5:76:04:1d: 4d:a3:39:69:0c:d9:80:8e:15:63:bd:fd:e5:2a:22:2d:82:f3: 50:0a:71:d2:15:5a:f8:95:a7:14:0a:3a:74:e3:ec:62:0f:0c: c8:7c:c5:07:b9:62:94:ed:5c:7a:1c:68:78:96:f3:02:99:97: 66:dc:7b:f9:e2:51:88:9f:25:72:9c:4d:54:87:2a:db:c8:29: 58:19:48:cd:71:f8:26:76:b5:b5:af:47:07:9a:9d:cf:7b:4b: 3b:61:7c:ef:d5:37:4c:7f:b3:2f:31:d0:e5:74:00:59:74:0a: 56:94:14:d0:63:09:f3:46:0d:98:60:31:50:6b:e8:53:54:b5: 46:6d:ea:d4:ee:86:09:50:49:82:b7:00:a7:99:98:22:fb:61: 49:f6:00:00:77:70:51:00:23:ac:ef:21:f2:43:5b:71:1e:79: 84:6b:dc:eb:a5:7f:5e:86:e5:71:28:aa:88:69:c9:47:bb:8e: ab:eb:70:5c:5c:0f:41:0d:fb:0a:f6:56:8d:2d:be:82:71:5b: 3e:10:80:bc:c2:60:0b:05:a5:5c:0a:21:57:3c:3d:1e:1d:4e: 44:55:34:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULY2KM4HqKCwKtZC+z7WSqNrM1FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNTEwMTEwMTQ3MThaFw0yNTEwMTQwNjMyMThaMDMxMTAvBgNV BAMTKDY2OTkzM0M3Rjc2MTdGQjZDRkVFRDAxMEU5MEI3MzYzN0FGMDFDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLy387gr3gO3zjMantH6BxMcu 8brL8gfl1OscTzh/FsBIeqW5foOKkCObmLhadDR1FXJO/B87ZniXcBwozqZa7PSo 5w+yW1+lIOLa7E7OKOA1bmu5yCF9QLrX4bjN2/aCbKSA5sxxnS+kktJNBUS2Haut CXtZcHrvOyga+0Ka+HfqpjYxzpTiGUt5ns27reVZSjKCoxDl+vHZ9eTqYizDxxRi mS8lTkmQDEDM/GykhLV+kBqCGm9CgUXC/Duq9GW8hHgNLX75vy8So64KweL110Wp WEEYi84bdCYBS/gzlXtXxnM9aEpS0LiVS58pX3GUt0C4X2luvxAz4Zd08zH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpkzx/dhf7bP7tAQ6QtzY3rwHE4wHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThG QTI3NjY0QTk2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABionsdcqorvvF1/kDZDIC6cfQFyHSvST+mj L5t3+ht75XYEHU2jOWkM2YCOFWO9/eUqIi2C81AKcdIVWviVpxQKOnTj7GIPDMh8 xQe5YpTtXHocaHiW8wKZl2bce/niUYifJXKcTVSHKtvIKVgZSM1x+CZ2tbWvRwea nc97SzthfO/VN0x/sy8x0OV0AFl0ClaUFNBjCfNGDZhgMVBr6FNUtUZt6tTuhglQ SYK3AKeZmCL7YUn2AAB3cFEAI6zvIfJDW3EeeYRr3Oulf16G5XEoqohpyUe7jqvr cFxcD0EN+wr2Vo0tvoJxWz4QgLzCYAsFpVwKIVc8PR4dTkRVNL8= -----END CERTIFICATE-----Generated at Sat Oct 11 21:44:42 2025 by rpki-client